All MIBs › HPN-ICF-IPSEC-MONITOR-V2-MIB
Last Updated: 2012-06-27
Category: Technology: VPN, Vendor: H3C/HH3C, Vendor: HP/HPE
Description: A revised (v2) set of objects for monitoring IPsec security associations on HP/Comware VPN gateways, adding extended statistics beyond the original version.
Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.
What Is HPN-ICF-IPSEC-MONITOR-V2-MIB?
HPN-ICF-IPSEC-MONITOR-V2-MIB is an HPE/H3C Comware ICF private MIB providing an updated (v2) set of objects for monitoring IPsec Security Association (SA) tunnels on VPN gateways, allowing statistics to be retrieved for a specific tunnel or across all tunnels. No populated object list is available in this snapshot, but an IPsec monitoring MIB of this kind typically exposes tunnel status tables, negotiated SA parameters, and traffic/error counters (packets encrypted/decrypted, authentication failures, SA renegotiation counts) per tunnel. Its monitoring role is a software/service-health one for VPN connectivity: confirming IPsec tunnels remain established and pass traffic without excessive errors, rather than reporting physical hardware state. A tunnel showing zero traffic or repeated SA renegotiation failures would indicate a VPN connectivity or configuration problem between peers. It extends the vendor's IPsec management framework and is deployed on HPE/H3C Comware VPN gateways and firewalls terminating IPsec tunnels, where HPN-ICF-IPSEC-MONITOR-V2-MIB SNMP monitoring helps confirm tunnels stay established and pass traffic without excessive errors.
IPNetwork Monitor allows you to monitor SNMP objects defined in HPN-ICF-IPSEC-MONITOR-V2-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.
Supported Devices
- HPE/H3C Comware VPN gateways/firewalls
Monitoring Examples
No concrete sample object names are available for this MIB version in this snapshot, so a specific polling walkthrough cannot be given with confidence. Typically an operator would poll per-tunnel status and traffic counters to confirm an IPsec SA remains up and forwarding the expected packet volume, with repeated tunnel-down/renegotiation events across polls pointing to a peer-side configuration mismatch or unstable underlying transport.
What Can Be Monitored
- IPsec tunnel/SA status
- per-tunnel encrypted/decrypted packet counters
This MIB depends on
Related MIBs
Imported Objects
From HPN-ICF-OID-MIB
| hpnicfCommon | OBJECT-IDENTITY |
From IF-MIB
| InterfaceIndex |
From INET-ADDRESS-MIB
| InetAddress | |
| InetAddressType |
From RFC1213-MIB
| ifIndex |
From SNMPv2-CONF
| MODULE-COMPLIANCE | |
| NOTIFICATION-GROUP | |
| OBJECT-GROUP |
From SNMPv2-SMI
| Counter32 | |
| Counter64 | |
| Gauge32 | |
| Integer32 | |
| MODULE-IDENTITY | |
| NOTIFICATION-TYPE | |
| OBJECT-TYPE | |
| Unsigned32 |
From SNMPv2-TC
| DisplayString | |
| TEXTUAL-CONVENTION | |
| TruthValue |
How to Use in IPNetwork Monitor
Example using hpnicfIPsecTunTotalRefreshesV2 OID:
Select an HPE/H3C Comware VPN gateway/firewall (IPsec tunnel stats, v2) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type hpnicfIPsecTunTotalRefreshesV2 into the Find box to locate it in the OID tree, selecting the specific row/instance you want to monitor since this is a table column, then select it and click OK. The total number of security association refreshing performed. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.
OIDs
| OID symbolic | OID numeric | Type | Access | Description |
|---|---|---|---|---|
| hpnicfIPsecMonitorV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126 | The MIB is designed to get statistic information of IPsec tunnels. With this MIB, we can get information of a certain tunnel or all tunnels. | ||
| hpnicfIPsecObjectsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1 | |||
| hpnicfIPsecScalarObjectsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.1 | |||
| STR hpnicfIPsecMIBVersion | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.1.1 | DisplayString | read-only | Version string of this MIB. |
| hpnicfIPsecTunnelV2Table | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2 | not-accessible | The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel. | |
| hpnicfIPsecTunnelV2Entry | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1 | not-accessible | Information about hpnicfIPsecTunnelV2Table. | |
| I32 hpnicfIPsecTunIndexV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.1 | Integer32 | accessible-for-notify | The index of IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2147483647. |
| NUM hpnicfIPsecTunIfIndexV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.2 | InterfaceIndex | read-only | The interface index( the ifIndex of ifTable ). |
| I32 hpnicfIPsecTunIKETunnelIndexV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.3 | Integer32 | read-only | The index of the associated IPsec Phase-1 IKE Tunnel (IKETunIndex in the IKETunnelTable). 2147483647 is defined as invalid value. |
| HPN hpnicfIPsecTunIKETunLocalIDTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.4 | HpnicfIPsecIDTypeV2 | read-only | The type of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalType in the IKETunnelTable). |
| STR hpnicfIPsecTunIKETunLocalIDVal1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.5 | DisplayString | read-only | The value of the local peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue1 in the IKETunnelTable). If the local peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the local peer. If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the local peer type is fqdn/userFqdn, this is the host name used to identify the local peer. If the local peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the local peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations. |
| STR hpnicfIPsecTunIKETunLocalIDVal2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.6 | DisplayString | read-only | The second specification of the local peer's IP address for the associated IPsec Phase-1 IKE Tunnel (IKETunLocalValue2 in the IKETunnelTable). If the local peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the local peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the local peer type is others, this is a zero-length string. |
| HPN hpnicfIPsecTunIKETunRemoteIDTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.7 | HpnicfIPsecIDTypeV2 | read-only | The type of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteType in the IKETunnelTable). |
| STR hpnicfIPsecTunIKETunRemoteIDVal1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.8 | DisplayString | read-only | The value of the remote peer identity for the associated IPsec Phase-1 IKE Tunnel (IKETunRemoteValue1 in the IKETunnelTable). If the remote peer type is ipv4Addr/ipv6Addr, this is the IP address used to identify the remote peer. If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet address. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the beginning IP address of the range. If the remote peer type is fqdn/userFqdn, this is the host name used to identify the remote peer. If the remote peer type is derAsn1Dn, this is the binary DER encoding of an ASN.1 X.500 Distinguished Name [X.501] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is derAsn1Gn, this is the binary DER encoding of an ASN.1 X.500 GeneralName [X.509] of the principal whose certificates are being exchanged to establish the SA. If the remote peer type is keyId, this is an opaque byte stream which may be used to pass vendor-specific information necessary to identify which pre-shared key should be used to authenticate Aggressive mode negotiations. |
| STR hpnicfIPsecTunIKETunRemoteIDVal2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.9 | DisplayString | read-only | The second specification of the remote peer's IP address for the associated IPsec Phase-1 IKE Tunnel(IKETunRemoteValue2 in the IKETunnelTable). If the remote peer type is ipv4AddrSubnet/ipv6AddrSubnet, this is the subnet mask. If the remote peer type is ipv4AddrRange/ipv6AddrRange, this is the ending IP address of the range. If the remote peer type is others, this is a zero-length string. |
| IPt hpnicfIPsecTunLocalAddrTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.10 | InetAddressType | read-only | The type of the IP address for the local peer of the IPsec Phase-2 Tunnel. |
| IP hpnicfIPsecTunLocalAddrV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.11 | InetAddress | read-only | The IP address of the local peer for the IPsec Phase-2 Tunnel. |
| IPt hpnicfIPsecTunRemoteAddrTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.12 | InetAddressType | read-only | The type of the IP address for the remote peer of the IPsec Phase-2 Tunnel. |
| IP hpnicfIPsecTunRemoteAddrV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.13 | InetAddress | read-only | The IP address of the remote peer for the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunKeyTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.14 | HpnicfIPsecNegoTypeV2 | read-only | The key negotiate mode used by the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunEncapModeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.15 | HpnicfIPsecEncapModeV2 | read-only | The encapsulation mode used by the IPsec Phase-2 Tunnel. |
| INT hpnicfIPsecTunInitiatorV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.16 | INTEGER | read-only | The initiator of this IPsec tunnel. Value none is used for manual IPsec tunnel, for there is no initiator or responder in this method. |
| G32 hpnicfIPsecTunLifeSizeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.17 | Gauge32 | read-only | The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes. 0 is defined as invalid value. |
| I32 hpnicfIPsecTunLifeTimeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.18 | Integer32 | read-only | The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds. 2147483647 is defined as invalid value. |
| I32 hpnicfIPsecTunRemainTimeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.19 | Integer32 | read-only | The remain time of SA in seconds. 2147483647 is defined as invalid value. |
| I32 hpnicfIPsecTunActiveTimeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.20 | Integer32 | read-only | The duration the IPsec Phase-2 Tunnel has been active in hundredths of seconds. 2147483647 is defined as invalid value. |
| G32 hpnicfIPsecTunRemainSizeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.21 | Gauge32 | read-only | The remain LifeSize of SA in kilobytes. 0 is defined as invalid value. |
| C32 hpnicfIPsecTunTotalRefreshesV2Ex | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.22 | Counter32 | read-only | The total number of security association refreshing performed. |
| G32 hpnicfIPsecTunCurrentSaInstancesV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.23 | Gauge32 | read-only | The number of security associations which are currently active or expiring. |
| HPN hpnicfIPsecTunInSaEncryptAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.24 | HpnicfIPsecEncryptAlgoV2 | read-only | The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunInSaAhAuthAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.25 | HpnicfIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunInSaEspAuthAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.26 | HpnicfIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the inbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunDiffHellmanGrpV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.27 | HpnicfIPsecDiffHellmanGrpV2 | read-only | The Diffie Hellman Group used by the security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunOutSaEncryptAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.28 | HpnicfIPsecEncryptAlgoV2 | read-only | The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunOutSaAhAuthAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.29 | HpnicfIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecTunOutSaEspAuthAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.30 | HpnicfIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the outbound encapsulation security protocol(ESP) security association of the IPsec Phase-2 Tunnel. |
| STR hpnicfIPsecTunPolicyNameV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.31 | DisplayString | read-only | The policy name used by this IPsec tunnel. |
| I32 hpnicfIPsecTunPolicyNumV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.32 | Integer32 | read-only | The sequence number of policy used by this IPsec tunnel. |
| INT hpnicfIPsecTunStatusV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.2.1.33 | INTEGER | read-only | The status of the IPsec Tunnel. |
| hpnicfIPsecTunnelStatV2Table | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3 | not-accessible | The IPsec Phase-2 Tunnel Statistics Table. | |
| hpnicfIPsecTunnelStatV2Entry | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1 | not-accessible | Information about hpnicfIPsecTunnelStatV2Table. | |
| C64 hpnicfIPsecTunInOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.1 | Counter64 | read-only | The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. |
| C64 hpnicfIPsecTunInDecompOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.2 | Counter64 | read-only | The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. |
| C64 hpnicfIPsecTunInPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.3 | Counter64 | read-only | The total number of packets received by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunInDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.4 | Counter64 | read-only | The total number of packets dropped during receiving process by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunInReplayDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.5 | Counter64 | read-only | The total number of packets dropped during receiving process due to Anti-Replay process by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunInAuthFailsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.6 | Counter64 | read-only | The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunInDecryptFailsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.7 | Counter64 | read-only | The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunOutOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.8 | Counter64 | read-only | The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. |
| C64 hpnicfIPsecTunOutUncompOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.9 | Counter64 | read-only | The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. |
| C64 hpnicfIPsecTunOutPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.10 | Counter64 | read-only | The total number of packets sent by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunOutDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.11 | Counter64 | read-only | The total number of packets dropped during sending process by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunOutEncryptFailsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.12 | Counter64 | read-only | The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunNoMemoryDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.13 | Counter64 | read-only | The total number of packets dropped due to no enough memory by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunQueueFullDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.14 | Counter64 | read-only | The total number of packets dropped due to queue full by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunInvalidLenDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.15 | Counter64 | read-only | The total number of packets dropped due to invalid length packet by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunTooLongDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.16 | Counter64 | read-only | The total number of packets dropped due to too long packet by this IPsec Phase-2 Tunnel. |
| C64 hpnicfIPsecTunInvalidSaDropPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.3.1.17 | Counter64 | read-only | The total number of packets dropped due to invalid SA by this IPsec Phase-2 Tunnel. |
| hpnicfIPsecSaV2Table | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4 | not-accessible | The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association. | |
| hpnicfIPsecSaV2Entry | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1 | not-accessible | Information about hpnicfIPsecSaV2Table. | |
| I32 hpnicfIPsecSaIndexV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.1 | Integer32 | accessible-for-notify | The number of the Sa associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Sa associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647. |
| INT hpnicfIPsecSaDirectionV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.2 | INTEGER | read-only | The direction of the SA. |
| U32 hpnicfIPsecSaSpiValueV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.3 | Unsigned32 | read-only | The value of the SPI. |
| HPN hpnicfIPsecSaSecProtocolV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.4 | HpnicfIPsecSaProtocolV2 | read-only | The security protocol of the SA. |
| HPN hpnicfIPsecSaEncryptAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.5 | HpnicfIPsecEncryptAlgoV2 | read-only | The encryption algorithm used by the security association of the IPsec Phase-2 Tunnel. |
| HPN hpnicfIPsecSaAuthAlgoV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.6 | HpnicfIPsecAuthAlgoV2 | read-only | The authentication algorithm used by the SA. |
| INT hpnicfIPsecSaStatusV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.4.1.7 | INTEGER | read-only | The status of the SA. |
| hpnicfIPsecTrafficV2Table | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5 | not-accessible | The IPsec Phase-2 Tunnel Traffic Table. | |
| hpnicfIPsecTrafficV2Entry | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1 | not-accessible | Information about hpnicfIPsecTrafficV2Table. | |
| HPN hpnicfIPsecTrafficLocalTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.1 | HpnicfIPsecTrafficTypeV2 | read-only | The type of the local peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet |
| IPt hpnicfIPsecTrafficLocalAddr1TypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.2 | InetAddressType | read-only | The type of the first IP address specification for the local peer's traffic. |
| IP hpnicfIPsecTrafficLocalAddr1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.3 | InetAddress | read-only | The first IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet address. If the local peer's traffic type is IP address range, this is the beginning IP address of the range. |
| IPt hpnicfIPsecTrafficLocalAddr2TypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.4 | InetAddressType | read-only | The type of the second IP address specification for the local peer's traffic. |
| IP hpnicfIPsecTrafficLocalAddr2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.5 | InetAddress | read-only | The second IP address specification of the local peer's traffic. If the local peer's traffic type is single IP address, this is the IP address. If the local peer's traffic type is IP subnet, this is the subnet mask. If the local peer's traffic type is IP address range, this is the ending IP address of the range. |
| I32 hpnicfIPsecTrafficLocalProtocol1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.6 | Integer32 | read-only | The first protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the beginning protocol number of the range. |
| I32 hpnicfIPsecTrafficLocalProtocol2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.7 | Integer32 | read-only | The second protocol number specification of the local peer's traffic. If the protocol type of the local peer's traffic is single protocol, this is the protocol number. If the protocol type of the local peer's traffic is protocol range, this is the ending protocol number of the range. |
| I32 hpnicfIPsecTrafficLocalPort1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.8 | Integer32 | read-only | The first port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the beginning port number of the range. |
| I32 hpnicfIPsecTrafficLocalPort2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.9 | Integer32 | read-only | The second port number specification of the local peer's traffic. If the port type of the local peer's traffic is single port, this is the port number. If the port type of the local peer's traffic is port range, this is the ending port number of the range. |
| HPN hpnicfIPsecTrafficRemoteTypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.10 | HpnicfIPsecTrafficTypeV2 | read-only | The type of the remote peer's traffic. Possible values are: 1) A single IP address 2) An IP address range 3) An IP subnet |
| IPt hpnicfIPsecTrafficRemAddr1TypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.11 | InetAddressType | read-only | The type of the first IP address specification for the remote peer's traffic. |
| IP hpnicfIPsecTrafficRemAddr1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.12 | InetAddress | read-only | The first IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet address. If the remote traffic type is IP address range, this is the beginning IP address of the range. |
| IPt hpnicfIPsecTrafficRemAddr2TypeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.13 | InetAddressType | read-only | The type of the second IP address specification for the remote peer's traffic. |
| IP hpnicfIPsecTrafficRemAddr2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.14 | InetAddress | read-only | The second IP address specification of the remote peer's traffic. If the remote traffic type is single IP address, this is the IP address. If the remote traffic type is IP subnet, this is the subnet mask. If the remote traffic type is IP address range, this is the ending IP address of the range. |
| I32 hpnicfIPsecTrafficRemoPro1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.15 | Integer32 | read-only | The first protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the beginning protocol number of the range. |
| I32 hpnicfIPsecTrafficRemoPro2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.16 | Integer32 | read-only | The second protocol number specification of the remote peer's traffic. If the protocol type of the remote peer's traffic is single protocol, this is the protocol number. If the protocol type of the remote peer's traffic is protocol range, this is the ending protocol number of the range. |
| I32 hpnicfIPsecTrafficRemPort1V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.17 | Integer32 | read-only | The first port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the beginning port number of the range. |
| I32 hpnicfIPsecTrafficRemPort2V2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.5.1.18 | Integer32 | read-only | The second port number specification of the remote peer's traffic. If the port type of the remote peer's traffic is single port, this is the port number. If the port type of the remote peer's traffic is port range, this is the ending port number of the range. |
| hpnicfIPsecGlobalStatsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6 | |||
| G32 hpnicfIPsecGlobalActiveTunnelsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.1 | Gauge32 | read-only | The total number of currently active IPsec Phase-2 Tunnels. |
| G32 hpnicfIPsecGlobalActiveSasV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.2 | Gauge32 | read-only | The total number of currently active or expiring IPsec Phase-2 SA. |
| C64 hpnicfIPsecGlobalInOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.3 | Counter64 | read-only | The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. |
| C64 hpnicfIPsecGlobalInDecompOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.4 | Counter64 | read-only | The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. |
| C64 hpnicfIPsecGlobalInPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.5 | Counter64 | read-only | The total number of packets received by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalInDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.6 | Counter64 | read-only | The total number of packets dropped during receiving process by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalInReplayDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.7 | Counter64 | read-only | The total number of packets dropped during receiving process due to Anti-Replay process by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalInAuthFailsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.8 | Counter64 | read-only | The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalInDecryptFailsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.9 | Counter64 | read-only | The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalOutOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.10 | Counter64 | read-only | The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. |
| C64 hpnicfIPsecGlobalOutUncompOctetsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.11 | Counter64 | read-only | The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. |
| C64 hpnicfIPsecGlobalOutPktsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.12 | Counter64 | read-only | The total number of packets sent by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalOutDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.13 | Counter64 | read-only | The total number of packets dropped during sending process by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalOutEncryptFailsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.14 | Counter64 | read-only | The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalNoMemoryDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.15 | Counter64 | read-only | The total number of packets dropped due to no enough memory by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalNoFindSaDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.16 | Counter64 | read-only | The total number of packets dropped due to not find SA by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalQueueFullDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.17 | Counter64 | read-only | The total number of packets dropped due to queue full by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalInvalidLenDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.18 | Counter64 | read-only | The total number of packets dropped due to invalid packet length by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalTooLongDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.19 | Counter64 | read-only | The total number of packets dropped due to too long packet by all current and previous IPsec Phase-2 Tunnels. |
| C64 hpnicfIPsecGlobalInvalidSaDropsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.6.20 | Counter64 | read-only | The total number of packets dropped due to invalid SA by all current and previous IPsec Phase-2 Tunnels. |
| hpnicfIPsecTrapObjectV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.7 | |||
| STR hpnicfIPsecPolicyNameV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.7.1 | DisplayString | accessible-for-notify | The IPsec policy name with a trap. |
| I32 hpnicfIPsecPolicySeqNumV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.7.2 | Integer32 | accessible-for-notify | The IPsec policy sequence number with a trap. |
| I32 hpnicfIPsecPolicySizeV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.7.3 | Integer32 | accessible-for-notify | The number of IPsec policies with a trap. |
| hpnicfIPsecTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8 | |||
| T/F hpnicfIPsecTrapGlobalCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.1 | TruthValue | read-write | Indicates whether all IPsec traps should be generated. |
| T/F hpnicfIPsecTunnelStartTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.2 | TruthValue | read-write | Indicates whether hpnicfIPsecTunnelStartV2 traps should be generated. |
| T/F hpnicfIPsecTunnelStopTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.3 | TruthValue | read-write | Indicates whether hpnicfIPsecTunnelStopV2 traps should be generated. |
| T/F hpnicfIPsecNoSaTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.4 | TruthValue | read-write | Indicates whether hpnicfIPsecNoSaFailureV2 traps should be generated. |
| T/F hpnicfIPsecAuthFailureTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.5 | TruthValue | read-write | Indicates whether hpnicfIPsecAuthFailFailureV2 traps should be generated. |
| T/F hpnicfIPsecEncryFailureTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.6 | TruthValue | read-write | Indicates whether hpnicfIPsecEncryFailFailureV2 traps should be generated. |
| T/F hpnicfIPsecDecryFailureTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.7 | TruthValue | read-write | Indicates whether hpnicfIPsecDecryFailFailureV2 traps should be generated. |
| T/F hpnicfIPsecInvalidSaTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.8 | TruthValue | read-write | Indicates whether hpnicfIPsecInvalidSaFailureV2 traps should be generated. |
| T/F hpnicfIPsecPolicyAddTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.9 | TruthValue | read-write | Indicates whether hpnicfIPsecPolicyAddV2 traps should be generated. |
| T/F hpnicfIPsecPolicyDelTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.10 | TruthValue | read-write | Indicates whether hpnicfIPsecPolicyDelV2 traps should be generated. |
| T/F hpnicfIPsecPolicyAttachTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.11 | TruthValue | read-write | Indicates whether hpnicfIPsecPolicyAttachV2 traps should be generated. |
| T/F hpnicfIPsecPolicyDetachTrapCntlV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.8.12 | TruthValue | read-write | Indicates whether hpnicfIPsecPolicyDetachV2 traps should be generated. |
| hpnicfIPsecTrapV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9 | |||
| hpnicfIPsecNotificationsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0 | |||
| NTF hpnicfIPsecTunnelStartV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.1 | This notification is generated when an IPsec Phase-2 Tunnel is created. | ||
| NTF hpnicfIPsecTunnelStopV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.2 | This notification is generated when an IPsec Phase-2 Tunnel is deleted. | ||
| NTF hpnicfIPsecNoSaFailureV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.3 | This notification is generated when an IPsec Phase-2 non-existent SA error occurs. | ||
| NTF hpnicfIPsecAuthFailFailureV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.4 | This notification is generated when the IPsec phase-2 authentication failure occurs. | ||
| NTF hpnicfIPsecEncryFailFailureV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.5 | This notification is generated when the IPsec phase-2 tunnel has an encrypting failure. | ||
| NTF hpnicfIPsecDecryFailFailureV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.6 | This notification is generated when the IPsec phase-2 tunnel has a decrypting failure. | ||
| NTF hpnicfIPsecInvalidSaFailureV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.7 | This notification is generated when the IPsec phase-2 invalid SA failure occurs. | ||
| NTF hpnicfIPsecPolicyAddV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.8 | This notification is generated when an IPsec policy is added. | ||
| NTF hpnicfIPsecPolicyDelV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.9 | This notification is generated when an IPsec policy is deleted. | ||
| NTF hpnicfIPsecPolicyAttachV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.10 | This notification is generated when an IPsec policy is attached with one interface. | ||
| NTF hpnicfIPsecPolicyDetachV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.1.9.0.11 | This notification is generated when an IPsec policy is detached with one interface. | ||
| hpnicfIPsecConformanceV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2 | |||
| hpnicfIPsecCompliancesV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.1 | |||
| hpnicfIPsecComplianceV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.1.1 | |||
| hpnicfIPsecGroupsV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2 | |||
| hpnicfIPsecScalarObjectsGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.1 | The group contains all of scalar objects of the MIB. | ||
| hpnicfIPsecTunnelTableGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.2 | The group contains the IPsec tunnel's property information. | ||
| hpnicfIPsecTunnelStatGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.3 | The group contains the IPsec tunnel's statistic information. | ||
| hpnicfIPsecSaGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.4 | The group contains the SA's property information. | ||
| hpnicfIPsecTrafficTableGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.5 | The group contains the property information of the data flow protected by IPsec tunnel. | ||
| hpnicfIPsecGlobalStatsGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.6 | The group contains all of the IPsec tunnel's statistic information. | ||
| hpnicfIPsecTrapObjectGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.7 | The group contains all of trap objects of IPsec tunnels. | ||
| hpnicfIPsecTrapCntlGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.8 | The group contains all of trap switches of IPsec tunnels. | ||
| hpnicfIPsecTrapGroupV2 | 1.3.6.1.4.1.11.2.14.11.15.2.126.2.2.9 | The group contains all of trap of IPsec tunnels. |
RFC description
Provides an updated v2 set of IPsec SA monitoring objects for HP/Comware VPN gateways with extended statistics.
Start monitoring HPE/H3C Comware VPN gateway/firewall (IPsec tunnel stats, v2) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.